Lucene search

K
cve[email protected]CVE-2007-1536
HistoryMar 20, 2007 - 8:19 p.m.

CVE-2007-1536

2007-03-2020:19:00
CWE-189
web.nvd.nist.gov
55
cve-2007-1536
integer underflow
file program
arbitrary code execution
heap-based buffer overflow
nvd

9.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.049 Low

EPSS

Percentile

92.7%

Integer underflow in the file_printf function in the “file” program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.

CPENameOperatorVersion
file:filefilele4.19

References

9.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.049 Low

EPSS

Percentile

92.7%